user login, register, hashed passwords, announcements start

2023-03-29 11:29:25 +02:00
parent e296205466
commit f858c47ff7
27 changed files with 623 additions and 125 deletions
--- a/StudentHouseDashboard/HouseData/Repositories/AnnouncementRepository.cs
+++ b/StudentHouseDashboard/HouseData/Repositories/AnnouncementRepository.cs
@@ -0,0 +1,53 @@
+using StudentHouseDashboard.Managers;
+using StudentHouseDashboard.Models;
+using System;
+using System.Collections.Generic;
+using System.Data.SqlClient;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace StudentHouseDashboard.Repositories
+{
+    public class AnnouncementRepository
+    {
+        private string connectionString = "Server=mssqlstud.fhict.local;Database=dbi509645;User Id=dbi509645;Password=sNPNBm*BX!6z8RM;";
+        public AnnouncementRepository() { }
+        private SqlConnection CreateConnection()
+        {
+            SqlConnection connection = new SqlConnection(connectionString);
+            try
+            {
+                connection.Open();
+            }
+            catch (Exception)
+            {
+                Console.WriteLine("Database connection error. Are you connected to the VDI VPN?");
+            }
+
+            return connection;
+        }
+        public List<Announcement> GetAllAnnouncements()
+        {
+            var announcements = new List<Announcement>();
+            UserManager userManager = new UserManager();
+            using (SqlConnection conn = CreateConnection())
+            {
+                string sql = "SELECT * FROM Announcements;";
+                SqlCommand cmd = new SqlCommand(sql, conn);
+                var reader = cmd.ExecuteReader();
+
+                while (reader.Read())
+                {
+                    // ID, Name, Password, Role
+                    announcements.Add(new Announcement(userManager.GetUserById(Convert.ToInt32(reader["ID"])), 
+                        reader["Description"].ToString(), reader["Title"].ToString(), 
+                        (DateTime)reader["PublishDate"], (bool)reader["IsImportant"],
+                        (bool)reader["IsSticky"]));
+                }
+                conn.Close();
+            }
+            return announcements;
+        }
+    }
+}
--- a/StudentHouseDashboard/HouseData/Repositories/UserRepository.cs
+++ b/StudentHouseDashboard/HouseData/Repositories/UserRepository.cs
@@ -0,0 +1,127 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+using System.Data.SqlClient;
+using StudentHouseDashboard.Models;
+using System.Data;
+using System.Xml.Linq;
+
+namespace StudentHouseDashboard.Repositories
+{
+    public class UserRepository
+    {
+        private string connectionString = "Server=mssqlstud.fhict.local;Database=dbi509645;User Id=dbi509645;Password=sNPNBm*BX!6z8RM;";
+
+        public UserRepository() { }
+        private SqlConnection CreateConnection()
+        {
+            SqlConnection connection = new SqlConnection(connectionString);
+            try
+            {
+                connection.Open();
+            }
+            catch (Exception)
+            {
+                Console.WriteLine("Database connection error. Are you connected to the VDI VPN?");
+            }
+
+            return connection;
+        }
+        public List<User> GetAllUsers()
+        {
+            var users = new List<User>();
+
+            using (SqlConnection conn = CreateConnection())
+            {
+                string sql = "SELECT * FROM Users;";
+                SqlCommand cmd = new SqlCommand(sql, conn);
+                var reader = cmd.ExecuteReader();
+
+                while (reader.Read())
+                {
+                    // ID, Name, Password, Role
+                    users.Add(new User(Convert.ToInt32(reader["ID"]),
+                        reader["Name"].ToString(),
+                        reader["Password"].ToString(),
+                        (UserRole)reader["Role"])
+                        );
+                }
+                conn.Close();
+            }
+            return users;
+        }
+        public User GetUserById(int id)
+        {
+            using (SqlConnection conn = CreateConnection())
+            {
+                string sql = "SELECT * FROM Users WHERE ID = @id;";
+                SqlCommand cmd = new SqlCommand(sql, conn);
+                cmd.Parameters.AddWithValue("@id", id);
+                var reader = cmd.ExecuteReader();
+
+                reader.Read();
+                // ID, Name, Password, Role
+                return new User(Convert.ToInt32(reader["ID"]),
+                        reader["Name"].ToString(),
+                        reader["Password"].ToString(),
+                        (UserRole)reader["Role"]);
+            }
+        }
+        public bool CreateUser(string name, string password, UserRole role)
+        {
+            using (SqlConnection conn = CreateConnection())
+            {
+                string sql = "INSERT INTO Users (Name, Password, Role) VALUES (@name, @pass, @role);";
+                SqlCommand cmd = new SqlCommand(sql, conn);
+                cmd.Parameters.AddWithValue("@name", name);
+                cmd.Parameters.AddWithValue("@pass", password);
+                cmd.Parameters.AddWithValue("@role", (int)role);
+                int writer = cmd.ExecuteNonQuery();
+                if (writer == 1)
+                {
+                    return true;
+                }
+                else return false;
+            }
+        }
+        public bool UpdateUser(int id, string name, string password, UserRole role)
+        {
+            using (SqlConnection conn = CreateConnection())
+            {
+                string sql = "UPDATE Users " +
+                    "SET Name = @name, Password = @pass, Role = @role " +
+                    "WHERE ID = @id;";
+                SqlCommand cmd = new SqlCommand(sql, conn);
+                cmd.Parameters.AddWithValue("@name", name);
+                cmd.Parameters.AddWithValue("@pass", password);
+                cmd.Parameters.AddWithValue("@role", (int)role);
+                cmd.Parameters.AddWithValue("@id", id);
+                int writer = cmd.ExecuteNonQuery();
+                if (writer == 1)
+                {
+                    return true;
+                }
+                else return false;
+            }
+        }
+        public bool DisableUser(int id)
+        {
+            using (SqlConnection conn = CreateConnection())
+            {
+                string sql = "UPDATE Users " +
+                    "SET Name = 'Deleted User @id', Password = '0', Role = @role " +
+                    "WHERE ID = @id;";
+                SqlCommand cmd = new SqlCommand(sql, conn);
+                cmd.Parameters.AddWithValue("@id", id);
+                int writer = cmd.ExecuteNonQuery();
+                if (writer == 1)
+                {
+                    return true;
+                }
+                else return false;
+            }
+        }
+    }
+}